Intex Router N-150 – Arbitrary File Upload

• Exploit Database
• 36 阅读

• 作者： Samrat Das
  日期： 2018-06-25
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/44939/

• # Exploit Title:​​ Intex Router N-150 - Arbitrary File Upload
  # Date: 2018-06-23
  # Exploit Author: Samrat Das
  # Version: N-150
  # CVE : N/A
  # Category: Router Firmware
  
  # 1. Description
  # The firmware allows malicious files to be uploaded without any checking of
  # extensions and allows filed to be uploaded.
  
  # 2. Proof of Concept
  
  - Visit the application
  - Go to the advanced settings post login
  - Under backup- restore page upload any random file extension and hit go.
  - Upon the file being upload, the firmware will get rebooted accepting the arbitrary file.